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Abstract — In this paper, a lemma in algebraic coding theory 
is established, which is frequently appeared in the encoding and 
decoding for algebraic codes such as Reed-Solomon codes and 
algebraic geometry codes. This lemma states that two vector 
spaces, one corresponds to information symbols and the other 
is indexed by the support of Grobner basis, are canonically 
isomorphic, and moreover, the isomorphism is given by the 
extension through linear feedback shift registers from Grobner 
basis and discrete Fourier transforms. Next, the lemma is applied 
to fast unified system of encoding and decoding erasures and 
errors in a certain class of affine variety codes. 

Keywords: Berlekamp-Massey-Sakata algorithm, Grobner 
basis, discrete Fourier transforms, order domain codes, evalu- 
ation codes. 

I. Introduction 

Despite many researches have been done for both of en- 
coding and erasure-and-error decoding, any relation between 
them have never been found so far except maximum distance 
separable (MDS) codes, which satisfy d — 1 = n — k, where 
n, k, and d is the code length, dimension, and the minimum 
distance of the code, respectively. Since the correctable num- 
bers u of erasures and t of errors satisfy 2t + u < d — 1, 
it is obvious for MDS codes that, if t = 0, then erasure- 
only decoding can determine n — k redundant symbols, that 
is, systematic encoding is done by erasure-only decoding. In 
general, algebraic geometry codes are not MDS codes; there 
has never been known no such case where erasure decoding 
can undertake systematic encoding. 

In this paper, we first establish a lemma that is essen- 
tial in algebraic coding theory. We observe that almost all 
manipulations on algebraic Goppa codes such as encoding 
and decoding are described in terms of the lemma, which 
provides an isomorphism between a certain pair of vector 
spaces over a finite field. The isomorphism of the lemma is 
written by the combined map of the extension by the linear 
recurrence relation from a Grobner basis and iV-dimensional 
inverse discrete Fourier transform (IDFT). Next, the lemma is 
applied to a class of affine variety codes 151. 1131 . which are 
essentially same as order domain codes or evaluation codes 
CD, G),|4|], and enables us to decode efficiently erasures and 
errors. Finally, we notice that, in a class of affine variety codes, 
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systematic encoding can be viewed as a certain type of erasure- 
only decoding. 

The rest of this paper is organized as follows. In Section 
HIl we prepare notations. In Section [TTU we state the lemma. 
In Subsection IIII- Al we generalize discrete Fourier transforms 
(DFTs) from on (F*) N into on F^. In Subsection HEb] two 
vector spaces are defined via Grobner basis. In Subsection 
IIII-C1 we give an isomorphism between the vector spaces. 
In Section IIV1 we apply the lemma. In Subsection IIV-AI 
we construct affine variety codes in terms of the lemma. In 
Subsection IIV-B1 an erasure-and-error decoding algorithm and 
its relation with systematic encoding is described. In Section 
IVl the number of finite-field operations in our algorithm is 
estimated. Section [VI] concludes the paper. 

II. Notations 

Throughout this paper, No is the set of non-negative in- 
tegers and a is a fixed primitive element of finite field F 9 , 
where q is a prime power. For a, b G No with a < b, let 
[a, b] := {a, a+1, ••• ,b}. For two sets A and B, A\B is 
defined as {u G A\u $ B}. For arbitrary finite set S, let 
Vs '■= {( v s)s I s € S, v s G F q } denote a vector space over 
¥ q whose componensts are indexed by S. For any arbitrary 
subset R C S, the vector space Vr is considered as a subspace 
of V s by Vr = {{v s ) s €V s \v s = for all s G S\R}. 

III. Main lemma 

A. Fourier-type transforms on 

Let N be a positive integer and let 

A := [0,q-l] N 

= {a = (oi, • • • , a N ) | oi, • ■ • , a N G [0, q - 1] } , 
n -=K = {w = (wx,- - >wjv) |wi,--- ,u N GFJ. 

In this subsection, Fourier-type transforms are defined as maps 
between two vector spaces, which are isomorphic to F^, 

V A := {(ha) A |aei,feaeF,}, 

V Q ■■= { (cu L ) n | lu g ft, c^e ¥ q } . 



£ Vh, discrete Fourier transform (DFT) where J) := (b%, ■ ■ ■ , bjy) £ A and, for 1 < i < AT, 



(J"atCq) a E Va is defined as [J 



E V A , 



(1) 



and cj a is considered as 



where a;- is defined by wj 1 
the substituted value cu a := x a \ x _ u , that is, oj a :=1 for all 
u E F 9 if a = 0. 

Example 1: The simplest case is iV := 1. Note that, if a 7^ 
and to = 0, then w a = trivially holds. Thus (J-ic Q ) A E Va 
can be directly written as 



E 



; a = E 



a 
a = 0. 



Assume the next simplest case N := 2. Then, for each 
(01,02) = (a, 6) E A, J-2C a b can be directly written as 



?2 Cab = < 



E(^,u,)en, V^o a ^ 0, 6 = 

Ew, u )en, a = 0. 6 ^ 

, E(^ )e s7 c ^ a = 6 = 0. 

Assume A~ := 3. Then, for each (01,02,03) = (a, b, c) E A, 
J~3C aoc can be directly written as 

E(^,«)efi c <P^<i> a i> b 
E(^,i/i,u)en c </«K"/> a ^ c 
J" 3 c afec = <( E(^v^)en c <^VA; c 
E(0,^,cj)en c M^ ( t' a 
E(0,vi,w)en c M^' t f ,b 
E(0,i/,,w)efi c H>u L ° c 
E(0,^, w )en c ^0^ 



a6c ^ 

a& 7^ 0, c = 
ac ^ 0, 6 = 
6c 7^ 0, a = 
a 7^ 0, 6 = c = 
6^0, a = c = 
c^0, a = 6 = 
a = 6 = c = 0. 



In general, to write J-^c a directly, 2 equalities are required. 

□ 

On the other hand, for (^a)^ E Va, inverse discrete Fourier 
transform (IDFT) [T^ ~hj) „ E Vh is defined as follows. 0For 
each cj E fi, a subset 7 = {ii ■ ■ • , i m } of [1, N] is determined 
such that Ui 1 ■ ■ ■ Ui m 7^ and u)i — for all i E [1, AT] \J. 
Then, define 

9-1 

:= (-1)™ 

(2) 

£ (-D'^kw)^^ 1 - 

JC[1,N]\I^ 

'We consider that (^ivc^)^ means "the index of J-jvc is a £ A", i.e., 
■FjvCa = (^jvc)^ and not J'jy (ca). 

Similarly to footnote Q] (j^ 1 ^ 
and not that T^h^ = J r J ^ 1 (/i !fi ). 



means that JF„. /i^ 



* E 7 

1 ieJ 

i e [1, Af] \(J U J) 



(3) 



For example, if 



7^ for lo = {u)\ , • • • , wat) e O, 



then 7 is equal to [l,N\, there is only one choice of J = 
and in this case the definition ® implies 



■J A J IV. 



(-1) 



A' 



9 -l 

£ 

,In~- 



.-It, 



in other words, F N agrees with A^-dimensional inverse dis- 
crete Fourier transform if is restricted to (F* ) . In general, 
for each u E fl, J 7 ^ h u is equal to a linear combination of 
inverse discrete Fourier transforms whose dimensions do not 
exceed AT. 

Example 2: Assume N := 1. If o> 7^ £ fi, then I = 
{1} C [1, 1], J = C [1, 1]\7 = 0, and J) = h =: i. If 
u = £ Q, then / = C [1, 1], J = 0, {1} C [1, = {1}, 
and J) = 0, q — 1, respectively. Thus (j 7 ^ 1 /!^)^ E Vh 
can be directly written as 




1 ~ l hM- 



q-l 



a = 0. 



Assume A r := 2. For (wi,aj 2 ) = (">P,u) £ fi, for example, if 
7^ 0, then J = {1,2} C [1,2], J = C [1,2]\7 = 0, 
and |(7, J) = (h,h) =■ if ^ and w = 0, 

then I = {1} C [1,2], J = 0, {2} C [1,2]\7 = {2}, and 
i(I,J) — i({l},J) = (i,0),(i, q— 1), repsectively. Thus 
(J r 2 _1 ft.^ w )j 2 E Vh can be directly written as ®. Assume 
A^ := 3. For {uj\, 012,^3) = (<fr,ip,uj) E O, for example, 
if 7^ 0, V = w = 0, then J = {1} C [1,3] = 
{1,2,3}. Then J C [1,3]\7 = {2,3} has four choices, 
i.e., J = 0,{2},{3},{2,3}, and respectively, J) = 
i({l},J)_= (* 1 0,0),(*,g-l,0),(*,0,g-l),(*, 9 -l,g-l). 
Thus (j" 3 1 h ( f 1T p u: ) n E V^ can be directly written as In 
general, the summand in each condition of u consists of 2 m 
terms, where m is the number of nonzero components in u. 

a 

Proposition 1: The two linear maps 



[V A 3 (h ± ) A 



(•^JVCa)^ E Va] 



are inverse each other, that is, TnJ'n h a 



and 

□ 



B. 7wo vector spaces Vg anrf V* 

Let VP C 17 and n := One of the two vector spaces 
in the lemma is given by 

V#:=|(ev,J ^£*, c^GF g |, 

3 For any finite set S, the number of elements in S is represented by \S\. 



1 : ~ "0,9-1 — "g-1,0 



l g-l,g-l 



hi,q— l,q— 1 

-ft, 



7^ 
V> 7^ 0, w = 

V> = 0, w ^ 
V> = w = 0. 

#w ^ 



— Ei=l (fti,0,0 — fti,g-l,0 ~ fti,0,g-l " 

— E|=l(ftoj,0 — ftg-l,j,0 — fto,j,g-l 
~~ E'=l (^0,0,; — hq-1,0,1 — ho,q-l,l + hq-l t q-X,l)LO 1 

ho,0,0 — ^0,0,9-1 — ^0,9-1,0 — frg-1,0,0 

+ /k),g-l,g-l + ftg-l,0,g-l + ftg-l,g-l,0 — ftg-l,g-l,g-l 



# ^ 0, w = 

<?w ^ o, v = o 
^ o, ^ = o 
^ o, v = w = o 

i/>^0, </> = cj = 
w^O, = V = O 

= ?/; = w = 0. 



(4) 



(5) 



namely, V* is the vector space over F g indexed by the 
elements of ^, whose dimension is trivially n. The other 
of the two vector spaces is somewhat complicated to define, 
since it requires Grobner basis theory. Let ¥ q \x\ be the ring 
of polynomials with coefficients in F g whose variables are 
Xi, ■ ■ ■ , £/v. Let be an ideal of ¥ q \x\ defined by 

■= { /(as) £ ¥ q [x] | f(f) = for all f_ G } . 

We fix a monomial order ^ of { x- \ s <E N^} H. We denote, 

for / ^ G ¥ q \x\, 



LM(/) 
if / = 



max 

-< 



E 



whrere x- 



■ x 



iY 



for s = (si, • • • , sat) € Nq , and 



LM(/) is called the leading monomial of f(x) G ¥ q [x]. Then 
the support 5* = 5 C Nff of Zy for * is defined by 



^\{mdeg(LM(/)) \f(x)eZ v }, 



where mdeg (a;-) '■— s£ Nq . Fortunately, 5* has an intuitive 
description if a Grobner basis of Zy is obtained; it 
corresponds to the area surrounded by LM (Q&). The support 
= S C of for * is equivalently defined by 



|seN v }\{LM(/) |/£r)GZ*}. 
Then the other of the two vector spaces is given by 



(6) 



V s 



V s * := { {hs) s = (hs) S9 | a G 5*, h, G F 9 } 



namely, Vs is the vector space over F g indexed by the elements 
of Sy, Since {x-| s€5$} is a basis of F g [a;]/Z$ that is 
the quotient ring viewed as a vector space over ¥ q , Vs is 



isomorphic to ¥ q \x\jZy. It is known [5 1,[6| that the evaluation 
map 

¥ q \x\/Z q! 3 / (x) ^ (/ (f))^ G V* (7) 

is an isomorphism between two vector spaces. Thus the map 
d7j is also written as 



V S 3 (fc.) 



(8) 



which is denoted as cv : Vs — > V*. In particular, it 
follows from the isomorphism (|7]l or (O that |5*| = | \I/ 1 and 
diiriF, Vs = n. 

Since Vs and Vs> have the same dimension n, it is trivial that 
Vs is isomorphic to V* as a vector space over ¥ q . However, 
this type of isomorphic maps depends on the choices of the 
bases of vector spaces; in addition, the normal orthogonal 
basis is not always convienient for encoding and decoding. 
Our lemma asserts that there is a canonical isomorphism that 
does not depend on the bases. As explained in Introduction, 
the isomorphic map Vs — > Vq, of the lemma is the composition 
map of the extension and IDFT, which are defined accurately 
in the next subsection IIII-CI On the other hand, the inverse 
map V^ — > Vs can be written concisely; that is "DFT" 



V* 9 




G V s , 



(9) 



which is actually the compound of DFTs in various dimen- 
sions. It is shown from the definitions that the matrices that 
represent two maps $Q and (0 are transposed each other if 
the bases of vector spaces are fixed. 

c 

C. Isomorphic map Vs — > V* 

Let Qq, be a Grobner basis for the ideal Z^ with respect to 
<, We assume that consists of d+ \ elements {g^ u '}o<u<d, 



where 



IV. Applications of main lemma 



gM=gM(x) = 



E 



gr'aP e ¥ q [x] with s u e s 



5*. 



(10) 



Definition 1: We define that , G satisfies the linear 
recurrence relation from if and only if there exists (hs) s G 
Vs such that, for all a G A and all < u < d, 



E 



0, 



(13) 



where the indices i — (i\, - ■ ■ ,in) of /ij are viewed within 
1 < (ii mod (q - I)) < q if k ^ for 1~< ^ < AT. Then we 
denote that (/io)^ ^ ( h s)s- n 
Namely, each ft, a satisfies d + 1 equations. Then we also say 
that (ha) A is the extension of (h s ) s - In fact, there is one-to- 
one correspondence between arbitrary vectors (h s ) s and all 
vectors {ha} A that satisfy the linear recurrence relation from 
Q^; from a given (h s ) s , generate (h a )A inductively by 



E 9£\ 



a-\-s — s 



for ieA\S q 



(14) 



Then we obtain (ha) A that satisfies (fT3l >: the resulting 
values do not depend on the order of the generation be- 
cause of the minimal property of Grobner bases. Con- 
versely, from a given (h a ) that satisfies (1131 1. we obtain 
a vector (h s ) s by restricting A to S. Thus all (Zia)^ 
that satisfy the linear recurrence relation from are the 
extension of (h s ) by (TBI) , Denote £ : Vs — »• Va as 
the extension map [Vs 3 (hs) s ^ (ha) A £ Vk], and more- 
over, denote 7£ : Vn — > V* as the restriction map 
Vq 3 (cu) n >-> fc,/,^ G V* . The following lemma is fre- 
quently used in this paper. 

Main Lemma : If lj G fi\ it holds, for (ha) A G £ (Vs), 
that T^h^ = 0. Moreover, the composition map Vs — > V* 
in the following commutative diagram 



V A 



T 



N 



Vn 



V s 



C 



K 



Vst 



gives an isomorphism between Vs and V*. The composition 
map is written as C : Vs — > V*. □ 
Note that, if we admit that Va is isomorphic to Vn by J 7 ^ 1 , 
then the first assertion of the lemma "F^h^ = for w g" \t" 
deduces the isomorphism Vs and Vs, since the image of £ (Vs) 
by J 7 ^ 1 agrees with V*. We apply this lemma by putting '3/ as 
the set of rational points, the set of erasure-and-error locations, 
and the set of redundant locations of codewords. 



A. Ajfine variety codes /|5^ 

Let * C VL and R C 5*. Consider two types dTT), (O 
of affine variety codes [5| with code length n := l^l, where 
ip L := ^i 1 • • ■ V'/yf is defined samely as in (HJ. It follows from 
the isomorphic map cv : Vs — > V* of ([8]) that 



*) = cv (V R ) 



(15) 



and that 



G i?| is a linearly independent basis 
of C(R,^). Since ^2^^ c^iji- in (fT2l i is the value of the 

inner product for (c^j and (ip L )^ in Vp, the dual code of 

C(R, is equal to C ± (R, VP). Thus the dimension or the 
number of information symbols k of C (R, is equal to 
n — in other words, n — k = \R\. 

Consider a subspace Vs\n of Vs with S := that has 
dimension n — \R\. It follows from the isomorphic map C : 
Vs — > Vp of the lemma that 



C ± (R,^)=C(V S \ R ) 



(16) 



which is similar to dT3J. While the definition (O of C 1 - (R, 
is indirect and not constructive, the equality (fTol l provides 
a direct construction and it corresponds to a non-systematic 
encoding of C (R,^). Moreover, it is shown in the next 
subsection that the lemma also gives the systematic encoding 
for a class of such codes. 

It is shown that C(R, and C J ~(R, represent all 
linear codes over ¥ q respectively. Futhermore, the decoding 
algorithm [5| using Grobner basis up to half the minimum 
distance [(^min — 1 )/2 J is shown for C (R,^), However, 
since this type of decoding belongs to the class of NP-complete 
problems j2|, it is strongly suggested that the algorithm in [5 1 
does not run in polynomial time. 

There is another algorithm [15| that decode all linear codes 
by terror locating pair and solving system of linear equations. 
The algorithm 1 1 5 1 can correct at least up to half the Feng-Rao 
minimum distance bound [(^fr — 1 ) /2j and its computational 
complexity equals 0(n 3 ), where n is the code length of the 
linear code and f(n) — O (g(n)) means that |/(n)| < c|g(n)| 
for all n and some constant c > 0. 

It is also shown lfl4l that all linear codes over F g are 
represented as algebraic geometric (AG) codes from algebraic 
curves. As for fast decoding, Sakata et al. 0j5| showed fast 
algorithm for decoding up to [(^fr — 1)/2J applicable to AG 
codes of one-point type, a well-studied subclass of AG codes. 
Sakata et al. ifTTl also showed that the similar algorithm to that 
in ifTBI can decode erasures and errors up to |_(^fr — 1)/2J 
for one-point AG codes. O'Sullivan |3|,|4| generalized BMS 
algorithm for finding the Grobner basis of error locator ideal of 
affine variety codes. However, fast decoding of affine variety 
codes including finding error values has been an open problem 
so far. 



c(je,*) := j(V)^ s 



cy, = /v0- for some (/v) fl E Vj? 
= for all r E -R 



(ID 



(12) 



B. Z)/*T erasure-and-error decoding and systematic encoding 

Consider the encoding problem for C ± (R, 1 $>). From the 
lemma, non-systematic encoding is obtained as follows. For 
(hg) s £ Vr, let {ha) A E £ (Vr) be its extended vector. 

Then ^c^ := T^h^j E C ± (i?, 1 J r ) holds since .F/vCs = 

J^nJ 7 ^ h s = h s = for all s £ i?. However, since 
error-correcting codes are usually encoded systematically, it 
is natural to consider the systematic encoding for C ± (R, "J), 
which is a certain type of erasure-only decoding as we observe 
in this subsection. 

Let $ C f C !1 so that $ corresponds to the set 
of redundant positions and W\$ corresponds to the set of 
information positions. Then 5$ C S\& holds since Z<& j3 
and the definition ©. From now on, consider the linear codes 
C := C x (S<s,,y), i.e., 



C := C-^S*,*) 



c Vi^" 



for all se5$ 



(17) 



We choose $ C * such that $ ^ ^. Then A; := dim F , C = 
n - |$| > holds. 



Suppose that erasure-and-error has occurred in 

received word ir^ 



a 



from the channel. 



Let $i C $ be the set of erasure locations and let $2 C ^ 
be the set of error locations; we suppose that $1 is known but 
$2 and [e^j are unknown, that 5^ => ip E $1 U $2, 
and that ip E $ 2 ^ 0. If it + 2t < d FR with u := |<&i| 

and i := |$2| holds, where dpR is the Feng-Rao minimum 
distance bound [1 1,[13|, then it is known that the erasure-and- 
error version [8|,[17| of Berlekamp-Massey-Sakata (BMS) 
algorithm |3|,0 Chapter 10] or multidimensional Berlekamp- 
Massey (BM) algorithm calculates the Grobner basis ^$ 1 u* 2 - 
Since <&! is known, can be calculated by the ordinary 
error-only version in advance and then 0$ 1 u# 2 can be calcu- 
lated by the erasure-and-error version from the syndrome and 
the initial value Q^, 1 . By using the recurrence from Q& 1 u$ 2 
and the lemma, the erasure-and-error decoding algorithm is 
realized as follows. 

Algorithm 1: DFT erasure-and-error decoding @ 

Input: ( r t/>) anc l ^1 
Output: (ci'Jy £ C 



Stepl. (ha) A := (E t ^ 1 ±-) A 

Step 2. Calculate Q& 1 from syndrome {h a ) A 

Step 3. (rj s# := (E^*^)^ 

Step 4. Calculate Q^ 1 ij^ 2 from {?s) s an d 

Step 5. (fa) A ^ (rs)^ by G^ lU ^ 2 

Step 6. := i^N^t) ^ 



Next, we comment on the systematic encoding as erasure- 
only decoding. Systematic means that, for a given information 

(hri) , one finds ( cw, ) E C with cw, = /iw, for all ip E 
V — / V — / * — — — 

Since $ is known, systematic encoding can be viewed as 
an erasure-only decoding for (^e^j := (— . However, 
since t := and u := n — k = |$|, the correctable erasure- 
and-error bound u + 2i < g?fr does not hold in general. 

Nevertheless we can show that systematic encoding works 
as an erasure-only decoding. We calculate the Grobner basis 
in advance, which has the role of generator polynomials 
in the case of RS codes. 

Algorithm 2: DFT systematic encoding @ 

Input: I hj, ] and <i> 

V — /*\* 

Output: (V)^ E C with (V) = (h ± ) 



S<i> 



Step 1. (rj s# := (£^ e w\* fcg^ 
Step 2. (F„) A (r«) s- by 0* 

Step 3. (c^\ := (-.7^%) □ 
Thus the systematic encoding can be viewed as a special 
case of Algorithm Q] for = (hip^j with ^ := f° r 

t/i E $. Moreover, it can be obviously seen that any erasure- 
only (e^j can be decoded by Algorithm Q] if C 

It is expected that not only erasure-only but also erasure- 
and-error can be often decoded beyond the erasure-and-error 
correcting bound u + 2t < c?fr; in lfl2l . the improvement and 
the necessary and sufficient condition that succeeds in erasure- 
and-error decoding are obtained for Hermitian codes. 

V. Estimation of complexity 

We estimate the number of finite-field operations, i.e., addi- 
tions, subtractions, multiplications, and divisions, in Algorithm 
Q] for codes ( fTTT i since systematic encoding algorithm can 



be derived from Algorithm Q] Although there are various 
methods, e.g., fast Fourier transform (FFT), to reduce the 
manipulations in the algorithm, we mainly consider direct 
counting in their definitions because of conciseness. Moreover, 
we enumerate not the strict numbers but approximate bounds. 

Summarizing the results, we evaluate the algorithm as 
follows, where n is code length, N is dimension of il, q is 
finite-field size, d is the number of elements in Grobner bases. 



Algorithm Q] 


order of bound 


Step 1 


nNq N 


Step 2 


dn 2 


Step 3 


n 2 N 


Step 4 


dn 2 


Step 5 


N 

nq 


Step 6 


nNq N 


Step 7 


n 



Since N < d, the total number of operations in Algo- 
rithm Q] has the order dn 2 + nNq N . In the proof |5| of 
{linear codes} = {affine variety codes}, q N is chosen as 
q N > n > q N ^, which leads qn > q N and N > log q n > 
N — 1. Thus dn 2 + nNq N has the order of n 2 (d + qlogn). 
Thus Algorithm [T] has the computational complexity of order 
n 2+e , where < e < 1 and the implied constant depends 
on finite-field size q, which improves the order n 3 of that of 
Gaussian elimination for system of linear equations. 

VI. Conclusion 

In this paper, DFT and its inverse have been generalized 
to F^, and their Fourier inversion formula has been shown. 
Moreover, a lemma for algebraic coding theory has been 
obtained. As applications of our lemma, the construction of 
affine variety codes has been described, and fast erasure-and- 
error decoding and systematic encoding of a class of affine 
variety codes have been proposed. 
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